CVE-2006-1390

CVE-2006-1390 affects NetHack 3.4.3-r1 and earlier, Falcon’s Eye 1.9.4a and earlier, and Slash’EM 0.0.760 and earlier on Gentoo Linux. The connected documents describe a local privilege escalation where a member of the games group can modify saved-game state or create/overwrite save files to exec...

CVE-2006-1390: Undefined Security Weakness

The configuration of NetHack 3.4.3-r1 and earlier, Falcon's Eye 1.9.4a and earlier, and Slash'EM 0.0.760 and earlier on Gentoo Linux allows local users in the games group to modify saved games files to execute arbitrary code via buffer overflows and overwrite arbitrary files via symlink attacks...

[ GLSA 200603-23 ] NetHack, Slash'EM, Falcon's Eye: Local privilege escalation

Gentoo Linux Security Advisory GLSA 200603-23 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

NetHack, Slash'EM, Falcon's Eye: Local privilege escalation

Background NetHack is the classic single player dungeon exploration game. Slash'EM and Falcon's Eye are NetHack variants. Description NetHack, Slash'EM and Falcon's Eye have been found to be incompatible with the system used for managing games on Gentoo Linux. As a result, they cannot be played...

GLSA-200603-20 : Macromedia Flash Player: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-200603-20 Macromedia Flash Player: Arbitrary code execution The Macromedia Flash Player contains multiple unspecified vulnerabilities. Impact : An attacker serving a maliciously crafted SWF file could entice a user to view the SWF...

[ GLSA 200603-12 ] zoo: Buffer overflow

Gentoo Linux Security Advisory GLSA 200603-12 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

GLSA-200603-08 : GnuPG: Incorrect signature verification

The remote host is affected by the vulnerability described in GLSA-200603-08 GnuPG: Incorrect signature verification OpenPGP is the standard that defines the format of digital signatures supported by GnuPG. OpenPGP signatures consist of multiple sections, in a strictly defined order. Tavis Ormand...

GLSA-200603-04 : IMAP Proxy: Format string vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200603-04 IMAP Proxy: Format string vulnerabilities Steve Kemp discovered two format string errors in IMAP Proxy. Impact : A remote attacker could design a malicious IMAP server and entice someone to connect to it using IMAP Proxy...

[ GLSA 200602-09 ] BomberClone: Remote execution of arbitrary code

Gentoo Linux Security Advisory GLSA 200602-09 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

Mozilla Firefox 1.5 location.QueryInterface() Code Execution (linux)

Exploit for linux platform in category remote exploits ==================================================================== Mozilla Firefox 1.5 location.QueryInterface Code Execution linux ==================================================================== This file is part of the Metasploit...

Mozilla Firefox 1.5 (Linux) - location.QueryInterface() Code Execution (Metasploit)

Mozilla Firefox 1.5 Linux - location.QueryInterface Code Execution Metasploit This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license a...

Mozilla Firefox 1.5 (Linux) - 'location.QueryInterface()' Code Execution (Metasploit)

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...

GLSA-200601-16 : MyDNS: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200601-16 MyDNS: Denial of Service MyDNS contains an unspecified flaw that may allow a remote Denial of Service. Impact : An attacker could cause a Denial of Service by sending malformed DNS queries to the MyDNS server. Workaround...

GLSA-200601-11 : KDE kjs: URI heap overflow vulnerability

The remote host is affected by the vulnerability described in GLSA-200601-11 KDE kjs: URI heap overflow vulnerability Maksim Orlovich discovered an incorrect bounds check in kjs when handling URIs. Impact : By enticing a user to load a specially crafted webpage containing malicious JavaScript, an...

Clam AntiVirus vulnerable to memory corruption via specially crafted UPX packed file

Overview A vulnerability in the ClamAV antivirus toolkit may allow a remote attacker to execute arbitrary code on a vulnerable system. Description Clam AntiVirus is an antivirus toolkit for Unix-like systems that is commonly integrated with mail servers for email attachment scanning. It supports ...

[ GLSA 200601-03 ] HylaFAX: Multiple vulnerabilities

Gentoo Linux Security Advisory GLSA 200601-03 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

Code injection

The ebuild for pinentry before 0.7.2-r2 on Gentoo Linux sets setgid bits for pinentry programs, which allows local users to read or overwrite arbitrary files as gid 0...

CVE-2006-0071

The ebuild for pinentry before 0.7.2-r2 on Gentoo Linux sets setgid bits for pinentry programs, which allows local users to read or overwrite arbitrary files as gid 0...

CVE-2006-0071

The ebuild for pinentry before 0.7.2-r2 on Gentoo Linux sets setgid bits for pinentry programs, which allows local users to read or overwrite arbitrary files as gid 0...

CVE-2006-0071: Undefined Security Weakness

The ebuild for pinentry before 0.7.2-r2 on Gentoo Linux sets setgid bits for pinentry programs, which allows local users to read or overwrite arbitrary files as gid 0...